Feed live

The CMS vulnerability ledger.

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Every published CVE that touches a CMS, plugin, theme, or page builder — indexed, scored, and cross-referenced against the components running on your sites.

Total CVEs tracked

349,528

All time

Critical · Active

12,232

CVSS ≥ 9.0

New · 14 days

3,109

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 16111–16140 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-27605	medium	5.5/10	WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-33924	high	7.6/10	WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-38382	—	—	WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-40207	high	7.6/10	WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-46849	high	7.6/10	WordPress Coming Soon Plugin <= 1.5.9 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-46860	high	8.5/10	WordPress Short URL Plugin <= 1.6.4 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-45373	high	8.8/10	WordPress Slimstat Analytics Plugin <= 5.0.4 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47432	medium	6.7/10	WordPress Shortcode IMDB Plugin <= 6.0.8 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47430	medium	6.7/10	WordPress The School Management – Education & Learning Management Plugin <= 4.1 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47420	medium	6.4/10	WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2022-47428	medium	6.7/10	WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection	Nov 6, 2023 2y ago
CVE-2023-40215	high	7.6/10	WordPress Demon image annotation Plugin <= 5.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-35910	high	8.5/10	WordPress Quasar form Plugin <= 6.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-38391	medium	6.7/10	WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32741	high	7.6/10	WordPress Contact Form to Any API Plugin <= 1.1.2 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-36677	high	8.3/10	WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-36529	critical	9.9/10	WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-34179	high	7.6/10	WordPress Groundhogg Plugin <= 2.7.11 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25700	high	8.2/10	WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25800	high	8.1/10	WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25990	high	7.1/10	WordPress Tutor LMS Plugin <= 2.1.10 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32508	high	7.6/10	WordPress Order Your Posts Manually Plugin <= 2.2.5 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-32121	high	7.6/10	WordPress Zero Spam Plugin <= 5.4.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-46818	high	8.2/10	WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-47426	medium	6.0/10	WordPress Neshan Maps Plugin <= 1.1.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-46859	high	8.5/10	WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-26015	high	7.1/10	WordPress MapPress Maps for WordPress Plugin <= 2.85.4 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-46808	high	8.2/10	WordPress ARMember Plugin <= 3.4.11 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2022-47445	high	8.2/10	WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago
CVE-2023-25960	critical	10.0/10	WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to SQL Injection	Nov 3, 2023 2y ago